commitizen / commitizen/cz-conventional-changelog
Vulnerability warnings with ansi-regex and minimist
Open
- Dominant language
- JavaScript
- Stars
- 793
- Forks
- 444
- PR merge metrics
- No merged PRs in 30d
Description
I'm seeing a few vulnerability warnings after installing `3.3.0`, namely with `ansi-regex` and `minimist`.
Contributor guide
No contributing guide indexed for this repository
Research direction
The report names ansi-regex and minimist but no files, tests, or entry points. Reproduce the installation warning for version 3.3.0, trace which dependency declarations bring those packages in, and confirm the warnings are gone after the dependency fix.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- cli, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100